Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94BE289980A447BA623EA19824582092A780AD6B.cer
File:                     94BE289980A447BA623EA19824582092A780AD6B.cer (raw, json)
Hash identifier:          g0U+vUM67PDHu7+M5GPfyEF0gpC1qBzsDUBiVtIZ8Gs=
Subject key identifier:   94:BE:28:99:80:A4:47:BA:62:3E:A1:98:24:58:20:92:A7:80:AD:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0366D21C24E1D3B98DEBAD403BD3C14EB4A8D46D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/94BE289980A447BA623EA19824582092A780AD6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 07 Jan 2024 07:18:32 +0000
Certificate not after:    Sun 05 Jan 2025 07:23:32 +0000
Subordinate resources:    AS: 263661
                          IP: 45.179.86.0/23
                          IP: 168.205.124.0/22
                          IP: 177.221.56.0/22
                          IP: 187.63.236.0/22
                          IP: 2804:1128::/32

Validation:               Failed, certificate revoked on Sun 21 Jan 2024 02:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:d2:1c:24:e1:d3:b9:8d:eb:ad:40:3b:d3:c1:4e:b4:a8:d4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  7 07:18:32 2024 GMT
            Not After : Jan  5 07:23:32 2025 GMT
        Subject: CN=94BE289980A447BA623EA19824582092A780AD6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:2f:31:51:5b:b7:30:78:b8:1a:6d:68:c5:
                    97:71:5d:27:fc:a3:a0:0f:4b:34:9d:f1:19:2f:7e:
                    46:43:a5:cb:ab:90:01:55:5e:5d:ab:f9:51:43:cb:
                    a9:20:de:4d:de:a2:65:d2:2d:51:4c:9e:80:1d:f6:
                    c2:dc:78:b6:d8:49:6d:d6:6a:69:ff:ca:ab:f6:2b:
                    8f:bf:aa:51:35:ae:2a:6f:c7:bb:c4:ed:20:00:34:
                    9b:fb:f3:20:7f:2b:bb:c3:76:6a:8b:af:5c:a4:40:
                    5f:2c:63:b9:59:36:fc:ba:97:ae:ac:e1:a0:74:b3:
                    90:df:b1:37:84:dc:64:00:91:fd:3e:6d:62:88:d1:
                    8c:bd:be:f8:b1:42:02:cc:27:4b:2b:ae:80:3a:7b:
                    f9:ef:c7:81:f2:62:74:9a:11:fa:67:a2:cd:95:da:
                    b6:60:9a:20:d0:57:6c:ec:ea:a5:55:d4:12:aa:7d:
                    e1:32:df:be:41:7c:a0:aa:c5:e2:bb:6a:b9:d0:e9:
                    98:fa:06:1c:a0:56:70:e3:ec:af:86:72:10:ae:2c:
                    99:91:a8:25:6f:db:d0:7e:95:db:97:5d:d2:a6:c7:
                    0e:82:2b:58:23:b4:cc:7c:ba:d7:80:35:12:1d:ae:
                    4b:96:bf:b2:e6:56:2c:15:f3:8c:fb:74:e9:77:50:
                    7c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:BE:28:99:80:A4:47:BA:62:3E:A1:98:24:58:20:92:A7:80:AD:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/0/94BE289980A447BA623EA19824582092A780AD6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/23
                  168.205.124.0/22
                  177.221.56.0/22
                  187.63.236.0/22
                IPv6:
                  2804:1128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263661

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:e4:f3:28:b2:4d:6c:41:c6:38:da:49:86:72:18:b1:07:
         fd:90:32:4b:96:b1:71:16:c6:85:46:bd:eb:92:b4:c0:48:f2:
         48:c0:77:23:96:00:d3:b1:3c:24:17:dd:6b:a7:1b:a8:9a:c6:
         1f:ee:07:5b:34:11:81:6f:cd:80:eb:56:90:f7:24:5f:67:0d:
         51:f0:91:ca:ad:26:7c:d5:4f:44:91:79:c4:fd:6d:77:8c:d1:
         6b:ff:c8:87:93:a7:af:17:67:15:e2:ce:02:87:17:6a:3c:fd:
         cd:75:f0:65:50:01:73:4d:20:98:cd:e9:43:92:fe:25:ef:d4:
         cc:60:ac:16:00:b1:3d:23:e0:95:45:ec:4c:7d:1b:12:85:13:
         ba:b7:d3:91:14:65:4c:f5:72:b8:5f:9b:59:94:37:18:74:f1:
         d6:ab:8a:5f:ce:9b:3e:8b:86:74:50:5c:e0:df:18:94:c8:52:
         37:14:b8:13:46:67:68:4a:01:be:74:1a:4f:de:37:14:95:9f:
         22:4a:28:08:15:d0:55:17:b8:c3:1a:29:f3:d0:ee:96:9d:ad:
         89:a0:aa:27:db:46:5f:72:54:02:1d:4d:6d:c8:ff:77:dc:85:
         85:98:b5:4f:74:46:d8:db:8d:da:97:a4:22:34:fe:09:2c:02:
         6d:70:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:57:20 2024 by rpki-client on console.sobornost.net